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WHAT IS CLAIMED IS: 



1 . 



A method for authenticated access to multicast 



traffic , comprising : 

receiving a request for a user to join a multicast 
channel ; 

authenticating access privileges of the user to the 
multicast channel; and 

disallowing the request in response to at least an 
unsuccessful authentication . 

2. The method of Claim 1, authenticating access 
privileges of the user comprising: 

determining whether the user has access privileges 
to the multicast channel based on previously provisioned 
information for the user; and 

unsuccessfully authenticating access privileges of 
the user to the multicast channel in response to at least 
the user not having access privileges to the multicast 
channel . 

3. The method of Claim 1, wherein the multicast 
channel comprises an Internet protocol (IP) multicast 
channel and the request comprises an Internet group 
management protocol (IGMP) join request. 

4. The method of Claim 1, further comprising 
allowing the request in response to at least successful 
authentication . 

5. The method of Claim 1, wherein the multicast 
channel comprises at least one of video, audio, data and 
combinational content . 
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6. The method of Claim 1, further comprising: 
prior to receiving the request, provisioning the 

user's access privileges in an authentication, 
authorization, and accounting (AAA) server; and 

accessing the AAA server to authenticate access 
privileges of the user to the multicast channel. 

7. The method of Claim 6, wherein the AAA server 
comprises a remote authentication dial -in user service 
(RADIUS) server. 

8. The method of Claim 1, wherein the multicast 
channel comprises an Internet protocol (IP) multicast 
channel and the request includes an IP address of the 
user device, further comprising determining the user 
based on the IP address of the device. 

9. The method of Claim 1, authenticating access 
privileges of the user comprising: 

determining whether the multicast channel comprises 
a public multicast channel; and 

successfully authenticating access privileges of the 
user to the multicast channel in response to at least the 
multicast channel comprising the public multicast 
channel . 
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10. The method of Claim 1, authenticating access 
privileges of the user comprising: 

determining whether the user is logged in to a 
service provider providing the multicast channel; and 

unsuccessfully authenticating access privileges of 
the user to the multicast channel in response to at least 
the user not logged in to the service provider. 

11. The method of Claim 1, authenticating access 
privileges of the user comprising: 

determining whether the user is logged in to a 
service including the multicast channel; and 

unsuccessfully authenticating access privileges of 
the user to the multicast channel in response to at least 
the user not logged in to the service including the 
multicast channel . 

12. The method of Claim 1, authenticating access 
privileges of the user comprising: 

determining whether the user is logged in to a 
service provider providing a service including the 
multicast channel ; 

determining whether the user is logged in to the 
service including the multicast channel; and 

successfully authenticating access privileges of the 
user to the multicast channel in response to at least the 
user logged in to the service provider and the service. 

13. The method of Claim 1, wherein the request is a 
subscriber join request. 
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14. The method of Claim 1, authenticating access 
privileges of the user comprising: 

determining whether the multicast channel is a 
controlled access multicast channel; and 
5 authenticating access privileges of the user to the 

multicast channel in response to at least the multicast 
channel comprising the controlled access multicast 
channel . 



10 15. The method of Claim 1, further comprising: 

determining if authentication is enabled at an 
access router receiving the request; 

authenticating access privileges of the user to the 
multicast channel in response to at least determining 
15 that authentication is enabled; and 

allowing the request in response to at least 
determining authentication is not enabled. 
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16. A system for authenticated access to multicast 
traffic , comprising : 

means for receiving a request for a user to join a 
multicast channel ; 
5 means for authenticating access privileges of the 

user to the multicast channel; and 

means for disallowing the request in response to at 
least an unsuccessful authentication. 



10 17. A system of Claim 16, the means for 

authenticating access privileges of the user comprising: 

means for determining whether the user has access 
privileges to the multicast channel based on previously 
provisioned information for the user; and 

15 means for unsuccessfully authenticating access 

privileges of the user to the multicast channel in 
response to at least the user not having access 
privileges to the multicast channel. 



20 18. A system of Claim 16, wherein the multicast 

channel comprises an Internet protocol (IP) multicast 
channel and the request comprises an Internet group 
management protocol (IGMP) join request. 

25 19. A system of Claim 16, further comprising means 

for allowing the request in response to at least 
successful authentication. 



20. A system of Claim 16, wherein the multicast 
3 0 channel comprises at least one of video, audio, data and 

combinational content . 
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21. A system of Claim 16, further comprising: 
means for, prior to receiving the request, 

provisioning the user's access privileges in an 
authentication, authorization, and accounting (AAA) 
5 server; and 

means for accessing the AAA server to authenticate 
access privileges of the user to the multicast channel. 

22. A system of Claim 21, wherein the AAA server 
10 comprises a. remote authentication dial-in user service 

(RADIUS) server. 

23. A system of Claim 16, wherein the multicast 
channel comprises an Internet protocol (IP) multicast 

15 channel and the request includes an IP address of the 

user device, further' comprising means for determining the 
user based on the IP address of the device. 



24. A system of Claim 16, the means for 
20 authenticating access privileges of the user comprising: 

means for determining whether the multicast channel 
comprises a public multicast channel; and 

means for successfully authenticating access 
privileges of the user to the multicast channel in 
25 response to at least the multicast channel comprising the 

public multicast channel. 
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25. A system of Claim 16, the means for 
authenticating access privileges of the user comprising: 

means for determining whether the user is logged in 
to a service provider providing the multicast channel; 
5 and 

means for unsuccessfully authenticating access 
privileges of the user to the multicast channel in 
response to at least the user not logged in to the 
service provider. 

10 

26. A system of Claim 16, the means for 
authenticating access privileges of the user comprising: 

means for determining whether the user is logged in 
to a service including the multicast channel; and 
15 means for unsuccessfully authenticating access 

privileges of the user to the multicast channel in 
response to at least the user not logged in to the 
service including the multicast channel. 



2 0 27. A system of Claim 16, the means for 

authenticating access privileges of the user comprising: 

means for determining whether the user is logged in 
to a service provider providing a service including the 
multicast channel ; 
25 means for determining whether the user is logged in 

to the service including the multicast channel; and 

means for successfully authenticating access 
privileges of the user to the multicast channel in 
response to at least the user logged in to the service 

3 0 provider and the service. 



DAL01:573088.1 



ATTORNEY DCWT NUMBER 
062891 .0505^^ 



.TENT APPLICATION 



27 

28. A system of Claim 16, wherein the request is a 
subscriber join request. 

29. A system of Claim 16, the means for 
5 authenticating access privileges of the user comprising: 

means for determining whether the multicast channel 
is a controlled access multicast channel; and 

means for authenticating access privileges of the 
user to the multicast channel in response to at least the 
10 multicast channel comprising the controlled access 

multicast channel . 

30. A system of Claim 16, further comprising:, 
means for determining if authentication is enabled 

15 at an access router receiving the request ; 

means for authenticating access privileges of the 
user to the multicast channel in response to at least 
determining that authentication is enabled; and 

means for allowing the request in response to at 
20 least determining authentication is not enabled. 
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31. A system for authenticated access to multicast 
traffic , comprising : 

logic encoded in media; and 

the logic operable to receive a request for a user 
5 to join a multicast channel, to authenticate access 

privileges of the user to the multicast channel and to 
disallow the request in response to at least an 
unsuccessful authentication . 



10 32. The system of Claim 31, the logic operable to 

authenticate access privileges of the user by: 

determining whether the user has access privileges 
to the multicast channel based on previously provisioned 
information for the user; and 

15 unsuccessfully authenticating access privileges of 

the user to the multicast channel in response to at least 
the user not having access privileges to the multicast 
channel . 



20 33. The system of Claim 31, wherein the multicast 

channel comprises an Internet protocol (IP) multicast 
channel and the request comprises an Internet group 
management protocol (IGMP) join request. 



25 34. The system of Claim 31, the logic further 

operable to allow the request in response to at least 
successful authentication . 



35. The system of Claim 31, wherein the multicast 
30 channel comprises at least one of video, audio, data and 

combinational content . 
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36. The system of Claim 31, the logic further 
operable to: 

prior to receiving the request, provision the user's 
access privileges in an authentication, authorization, 
5 and accounting (AAA) server; and 

access the AAA server to authenticate access 
privileges of the user to the multicast channel. 



37. The system of Claim 36, wherein the AAA server 
10 comprises a remote authentication dial-in user service 

(RADIUS) server. 



38. The system of Claim 31, wherein the multicast 
channel comprises an Internet protocol (IP) multicast 
15 channel and the request includes an IP address of the 

user device, the logic further operable to determine the 
user based on the IP address of the device. 



39. The system of Claim 31, the logic operable to 
20 authenticate access privileges of the user by: 

determining whether the multicast channel comprises 
a public multicast channel; and 

successfully authenticating access privileges of the 
user to the multicast channel in response to at least the 
25 multicast channel comprising the public multicast 

channel . 
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40. The system of Claim 31, the logic operable to 
authenticate access privileges of the user by: 

determining whether the user is logged in to a 
service provider providing the multicast channel; and 
5 unsuccessfully authenticating access privileges of 

the user to the multicast channel in response to at least 
the user not logged in to the service provider. 

41. The system of Claim 31, the logic operable to 
10 authenticate access privileges of the user by: 

determining whether the user is logged in to a 
service including the multicast channel; and 

unsuccessfully authenticating access privileges of 
the user to the multicast channel in response to at least 
15 the user not logged in to the service including the 

multicast channel . 

42. The system of Claim 31, the logic operable to 
authenticate access privileges of the user by: 

20 determining whether the user is logged in to a 

service provider providing a service including the 
multicast channel ; 

determining whether the user is logged in to the 
service including the multicast channel; and 

25 successfully authenticating access privileges of the 

user to the multicast channel in response to at least the 
user logged in to the service provider and the service. 

43. The system of Claim 31, wherein the request is 
30 a subscriber join request. 



DAL01:573088.1 



DCj^HT NUMBER ^fe 1 



ATTORNEY DCj^BT NUMBER ^^TENT APPLICATION 

062891. 0505* 

31 



44. The system of Claim 31, the logic operable to 
authenticate access privileges of the user by: 

determining whether the multicast channel is a 
controlled access multicast channel; and 
5 authenticating access privileges of the user to the 

multicast channel in response to at least the multicast 
channel comprising the controlled access multicast 
channel . 



10 45. The system of Claim 31, the logic further 

operable to: 

determine if authentication is enabled at an access 
router receiving the request; 

authenticate access privileges of the user to the 
15 multicast channel in response to at least determining 

that authentication is enabled; and 

allow the request in response to at least 
determining authentication is not enabled. 
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46. A method for providing premium content services 
over a network using Internet protocol (IP) multicast 
channels, comprising : 

provisioning user access privileges to an IP 
5 multicast channel providing premium content, the premium 

content including at least one of video, audio and data; 

authenticating access privileges of a user to the IP 
multicast channel upon receiving a request for the user 
to join the IP multicast channel to receive the premium 
10 video content; and 

disallowing the request in response to unsuccessful 
authentication . 
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47. A method for authenticated access to multicast 
traffic , comprising : 

receiving a request for a user to join an Internet 
protocol (IP) multicast channel; 
5 authenticating access privileges of the user to the 

IP multicast channel by at least one of: 

determining whether the IP multicast channel is a 
public multicast channel; 

determining whether the user is logged in to a 
10 service provider providing a service including the IP 

multicast channel ; 

determining whether the user is logged in to the 
service including the IP multicast channel; 

successfully authenticating access privileges of the 
15 user to the IP multicast channel in response to at least 

one of determining the multicast channel is a public 
multicast channel and determining the user is logged in 
to the service provider and the service; 

unsuccessfully authenticating access privileges of 
2 0 the user to the IP multicast channel in response to at 

least one of determining the user is not logged in to the 
service provider and determining the user is not logged 
in to the service; 

terminating the request in response to at least an 
25 unsuccessful authentication; and 

processing the request in response to at least a 
successful authentication . 
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